> Markdown version of [/jobs/ext/3597165-devsecops-software-developer](https://www.wearedevelopers.com/jobs/ext/3597165-devsecops-software-developer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # DevSecOps Software Developer - **Company:** Envisioneering, Inc - **Location:** Washington, DC, United States - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Amazon Web Services, Automation of Tests, Microsoft Azure, Code Review, Open Web Application Security, Secure Coding, Security Software, Software Engineering, SonarQube, Google Cloud, Sonatype, Git, Cloudformation, Kubernetes, Infrastructure Automation Frameworks, Information Technology, Checkmarx, Terraform, Devsecops, Docker, Jenkins, Vulnerability Analysis - **Published:** October 6, 2026 - **Apply:** https://www.clearancejobs.com/jobs/9220593/devsecops-software-developer ## About the Role * Bachelor's degree in Computer Science, Software Engineering, or related field. * 5+ years of experience in DevSecOps practices and tools (e.g., Jenkins, Git, Docker, Kubernetes). * Strong understanding of secure coding principles and common vulnerabilities (OWASP Top 10). * Experience with infrastructure as code (IaC) tools such as Terraform or CloudFormation. * Knowledge of containerization and orchestration platforms (Docker, Kubernetes). * Active Top Secret (TS) security clearance required., * Master's degree in Computer Science or related field. * Experience with cloud platforms (AWS, Azure, GCP) and related security services. * Familiarity with compliance frameworks (NIST, ISO 27001, etc.). * Experience with automated security testing tools (e.g., Snyk, SonarQube, Checkmarx). ## Description * Develop and implement secure software development practices across the DevSecOps lifecycle. * Integrate security tools and processes into CI/CD pipelines to ensure code integrity and compliance. * Collaborate with development teams to embed security controls into application design and code. * Conduct security assessments, code reviews, and vulnerability scans to identify and remediate risks. * Automate security testing and monitoring to provide real-time visibility into system health.